General
-
Target
.
-
Size
146KB
-
Sample
240401-hg8enafh2s
-
MD5
9602cce3290d442ff57b8defb95bb82c
-
SHA1
46b40c8ad2b8d5a36719805f12b40389120ed425
-
SHA256
f57b75f9a8011bc2f574388d79cbbb75a09cb56b3598bf1d2cc11f26b01f76f6
-
SHA512
b6c765abf9a3f9abe61da82a87012a6f67999e4f96063b2781de67f95ca638633eedd545ddbea7b6f245188128825a685852c683987e995fd277607037fe9407
-
SSDEEP
1536:omkyd8LFVMUK4DgnVR4DBllKoVkL30vD9329s4D+HhqiE:1kzLFoVsllXmxYHhqiE
Static task
static1
Behavioral task
behavioral1
Sample
.html
Resource
win11-20240221-en
Malware Config
Extracted
crimsonrat
185.136.161.124
Targets
-
-
Target
.
-
Size
146KB
-
MD5
9602cce3290d442ff57b8defb95bb82c
-
SHA1
46b40c8ad2b8d5a36719805f12b40389120ed425
-
SHA256
f57b75f9a8011bc2f574388d79cbbb75a09cb56b3598bf1d2cc11f26b01f76f6
-
SHA512
b6c765abf9a3f9abe61da82a87012a6f67999e4f96063b2781de67f95ca638633eedd545ddbea7b6f245188128825a685852c683987e995fd277607037fe9407
-
SSDEEP
1536:omkyd8LFVMUK4DgnVR4DBllKoVkL30vD9329s4D+HhqiE:1kzLFoVsllXmxYHhqiE
Score10/10-
CrimsonRAT main payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-